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(54) CIPHER DEVICE 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide a cipher device 
having high safety for safeguarding data at the time of 
communication and storage of the data. 

SOLUTION: Input 801 is divided to a bit string 805 and bit 
string 804 by a dividing means 803 after linear conversion 
802. The bit string 805 is the input together with a key 
storage means 806 to nonlinear arithmetic operation 807. 
Linear substitution 809 is inputted with the output 808 of 
the nonlinear arithmetic operation 807 and nonlinear 
arithmetic operation 810 is inputted with the output of the 
linear substitution 809 and the bit string 804. The output 
808 and the output of the nonlinear arithmetic operation 
810 are integrated by an integrating means 811 and the 
output receives linear conversion 812 and is divided to a 
bit string 815 and a bit string 814 by a dividing means 
813. The bit string 814 is subjected to nonlinear 
arithmetic operation 817 together with the output 815 
after linear substitution 816 with a direct integrating 
means 818 and is inputted to the integrating means 818, 
by which the bit string is integrated to output 819. 
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(54) BS^0^5ftt] rtP^Sff 



(57) mm] miEft) 

mm] ^-tvmm^wm^m^'r-? *mw.-rz> 

A^? 8 0 1 tej»7g&* 8 0 2 ft, ^#J^ 
®8 0 3T?tr^y h£ij8 0 5 irtf ^ h^iJ8 0 4M#»I£*L 
£ 0 tfy b?iJ8 0 5te\ li|EtS#^8 0 6 t t 
»»)|[8 0 7OAAift5o i»8 0 9(i»i 
S8 0 7 <Z>£ti^ 8 0 8 ^rA^f U ^jfaMWl^ 8 1 0 fcfcjR 
?KR*8 0 9<^ffl^ilfs/ b?iJ8 0 4«rA*-t*So ft^ 
8 0 8t*«Jg»|[8 1 O(0ffl;fm#fr&3Ma:8 1 1 "C* 
1^£*L, m*t*|ft»*«8 1 2«rgtt. ^fJ#^8 1 3 
T?try h^j8 1 5 i tfy f^'J8 1 4t^S»JSax5 0 Ify 

h^ij 8 i 4 i^mmm^m sist, m&wMk s 1 e ^ 

ttW8 l 5 £*fc#*|?BSt#8 l 7 S*tTiK^#a 
8 1 8^A^LT^£*K ffl*8 19i45. 
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m^&t, mm i ©iiWBXift^a^tH^sr^n^Bi- 
©g^^notf^ h?*jtsB2©if ?/ bw^SH-sig 
2 ©^a^at , mm i<D\?y hm-mmtm^&iz- 

m-rm i ©*?BH*#a t . ?»ksi 2 <z> tf * b jaj^Kss 

m 2 i , mum 1 «>*i»»«ji#a© 

i: mm 2 <D#mMmn^&<vm?3 1 i,xx>t 

&<Dmx\zffl&&&&mirn2<Dmmim&&k. mm 

mm4(D¥y hm^mMm&*mirm2<DmMSi& 
#a t . itufEfg 3 <o if 3/ b ?a kr» 2 <£>*syg«»^atf> 
mx&ttm £*tx$?mmm9f.«:ft oms <D&mmmnm 
9tt. ttm3<D&mmm*¥m<omtikmem4<o\f*y 

b&lk ^»^LTI>iocotf y b&\k Lt^t5l3 
[fi»*3B2] St#Sl ^E*^B»^3£B^*5^-T\ S5E 

[fi»*« 3 ] 8ft*« l 2 fc:Ett<0tfF 

Kis^aE»#a^A*fcA*it-«jiwgii»*a 

^^s^a^m^tmiE^^tfe^a^A^i 
^A^i-r^>^*^a^^«^^^i^#®ii-5Bf^ 

[00 0 1] 




(2) W¥9-5 4 5 4 7 

2 

[0 0 0 2] 

[#£*£>&$?] DES (Data Encrypt io 
n Standard) i PffcfftSBf^frS; (4#PBg5 

1 - 1 0 8 7 0 1 rpf ^£Bj ) lcft*3;h,s# 

10 [0 0 0 3] Afi&tlfcT** MOltt ^i^l 
0 2^*5V^T^lC07^= 3 e^ M03 kB2<DT*X b 1 

0 4^*n*ttSo z<om\z&^Tn, a^ioi^b: 

trvy b*0 4:<Dtf <y h»©#ffiWtt3a»«riS*^. AX 

ai o 2 <DAt> tir& x o ?m&& t % x ? ?mtt?z 

h&Z>o % 1 <DT*X blO 4*JJ:^2C0^^^ b 1 
0 4 f*«fl^a 1 0 5 c^A^} i: »#*a 105H 

20 9 iSSfrifcft. tt^ai0 6f*«*N^a 

^J:o-C»#Sixfc*l©«#»^^ hi 09 km 

2<omw&frT*x b 1 1 o ^^uffl* liit 

t5o MIEj|J$#a 1 0 5 ttf-^«»¥S 1 0 7 Srrt 

Mb, K3E»*ai o 7<Dmjjkmmm2<D^*x b t 

[0 0 0 4] r<^J:5*fllfiS;S:i:Srt 1 -g'*S;i:LT^ 
DES£WM-ti\ FEAL (^P/£W]fc> "Fast d 
ata encryption algorithm 
30 FEAL— 8", Review of electri 
cal communications labora 
tories, Vol. 36 No. 4, 1 9 88) 4 

k^mm^thx^^o 

[000 5] rtte>CDPf#^^ N f-^l^tlO 
[0 0 0 6] B|2fiDES<Z>'7*— ^^Jfe^ai 0 7C01# 

[0 0 0 7] 3 2 tf y b^^feS-r — ^*»#a<3!>A* 
40 2 0 If*, fcMfcfiE 2 0 2iaot4 8 tT ^ b tdfe^S 

£*u£ 0 ^<?54 8 trs/ b giEti#a2 0 2tcSig$ 
ttn^s4 8 }f>y Y<omk(omx\? y b«<D#fi&wana 

ft 2 0 4^ff-j|L£tu5 0 »»2 0 5iiS^^ 
S.*t?©8o<7)*i||?gBi*^e>*5o ^^ix^M 

»H*ttv^*Lt>A*tf y bS^6 tf jx b, a^tr^b 

tf ^ bl?S)So SNffiWiSSfP 2 0 4<DMt}4 8 tf 
s> M*. 5feffi^e>HHic:6 tf ^ bS. 3o<o8Hft\z.&9)t> 
ti, *ti?tim\zs l9 S 2 , • • s.©A*tft 
^>o 8o^i»^«|<7?a*^»3 2 If y-b«, te« 
50 P 2 0 6tdJ;oT?fcg£;K *<DtS%:&mt) 2 0 7 kft 



(3) 



- 5 4 5 4 7 



So 

[0 0 0 8] S 3 E 2 0 2 ©fttBSr* Lfc* 
r&S 0 »felE 2 0 2fiAM3 2lf^>, W^JS 
4 8 try hOMSr&So fct 

T3 2J tV^ft^te&fctefiE 2 0 2coai^cO 
try h&A£l(D3 2#B i-ft^rt^LT 

*5<9, r<£>^<£>2#@<£> r i j tv^*^teifcM£fiE 

2 0 2 <DM£}<D 2 # B <Z> tr y h t^A^)^ 1 # B t -tt 
3r t**br^Stv i >5«fc 0 
&fi<D4 8 tfy htA^<Z)3 2 tfy h<£>BI««:*bT^ 

So 

[0 0 0 9] i4 f*H 3 <7?^l6?gBi*«B 2 0 5 CO 8 OCO 
^Ift^BIRSi, S 2 , • • S 8 <£>5*>, S,£>« 

*©*M«ft2 0 5ttAM6lfyK W;*>fi4ify 

y h tmk<o\fy h&m&JCfr^eiv (o, o> , (o, 

1) . (1,0), (1,1) T^Si'&iC^LTV^ 

& 0 i emvmtttti^ti. Ati<Dm2 try f^bis 

tfy biW4o©tr S ' b*4ffi©-i§Rt^fcLfct 
i^zlitRdSSbT^SK^so, 1, 2, • • 
■ r&5#^*t/SLr^5o ^cT^i^H W^7C04 
try h*4«f<7?-ii»i:^Ufci:#©ffi«:*UTV^ 
So fctx.fi, A^J^ (00 0 0 0 0) r&St1~S 

t, 5fcK<z>try ht*«<otry h or>»as (o, o) rfc 

^5 tf y h£r<£>4o<£>tr y y<dw& (oooo) -e& 
9 £;h,£4*T<z>-ii*t as t o^*nsi-s<^-cKa-r 
SfT^*ffl^)?!I^a-i6-rs^b, *©955H£*aMxrv^ 
ri 4j i^/S-rS4=Hf<z>-it* (l l l o) # 

A^ (000 0 00) tC*tjSt*SUi*t?S>5o -^£5 
i^ A*l^»l£-rStb*^ft^J;oT3ea?>?>*vTV^S<Z> 
^DEScDf-^tt&fSl 0 7<Df£mm&kS l9 S 

2 , • • • , S 8 ©»t^§ 0 * 

50 (x, y) = rot 2 ( x + 1 

51 (x, y) = rot 2 (x + y 
Jh<Z>3tr r o t 2 f32 tf y h#0>try h<£>n — 

[0015] rttb©it#©i*f*a:i;:»Lrs 
A«r«6-rr tliii:oTS?^4*riB!*J; 5 t-rsW3St>f? 
tottrv^So -ftt *.Ji/hUj»— ?> "How to st 

rengthen DES— 1 ike Cryptos 
ystms againstDifferential 
Cryptana lysis" , IEICE Tra 
ns. Vol. E76-A No. 1 Jan 199 
3 ft fa* r 5 LfcW3EO— 0fl-x?a>£ o 

[0 0 l 6] 0 7S:fl^r, 89iE/hiJUe> id J: or »3BS ^ 



* [0 0 1 0] 0 5f*teKP 2 0 6<Z>»«g**bfcH-T?& 
So KIP 2 0 6tiA^fft3 2 tfy K W^lS3 2 try 
bOBiStr&So ^<^B*-iilgi3(^feASs^E 2 0 2^ 
«flE**Lfc*tlRl«r, tckpuizomoftmv r l 
6j tV^5^i^SP 2 0 6<Dm£}<Dmty<D¥y hi* 
A^l 6#B t-grTSr t£«tLr:fc9 N ^(Dm<0 
2f r 7 J t^5»*fcMEfiP 2 0 6<Dmt)<D2m 
BO try htf*A;*J<E>7#B i-St5rt**tt^ 
St^5<fc5i^ teBP 2 0 60ffl*03 2 try h t A 
10 ^103 2 tfy h«^Ul^o 

[0 0 1 1 ] 06liFEALOf-*«ft¥Sl 0 7© 
i^U:fcOTfe^ 0 H6Srfflv^TFEAL©f- 

[0 0 12] 3 2 tTs/ b^bftSf-^^S^A* 
6 0 111 8 tfy M*o0 4o<oa55>ic:5>SdSn5o - 
;ft,£0 5 fe^2#B<D8 try h t 3#B<£>8 If y M*. 

r.^e>a#t«lsilE^S6 o 2i£fatg£*i/r^s i 6 tr 
y h<o«t<z>if y hSoSM&»»3afij-eK&*x.e>ix, 

se>^i#B©8 try h^g#tfffci-M#^xie>ttfc 

20 2 SB ©8 tfy h t<D tfy h^#lWMftr*It^ 
4#B©8lf y htte#t«ffc^Bt*X.e>*t 
fc3#l^)8 tfy h totr y hS^SNffiW»3gSl-eB# 
**.o*b5o £fet-. 2#|(7)8 ify hf££#t 3#B 
CO 8 tfy h«rA*t1-S*i»^lli*S,'6 0 3©W^ 

3#@CD8 tf y Mig#t 2#gC08 tf 
y h t*rA*t-rS*«UKH»So 6 0 4©ffiAl?IS 
t&X-otU 1#B<D8 If y M*B#t 2#|(08 y h 
t^A^tt-S^?g|8mSo 6 0 5©ffiAtl#»i 
o*K 4#@<D8 try H*S#t 3#B<Z>8 try htS: 

30 A^t-rs^^M^cs, 6 o 6oa*t?B#*x.e> 

*K rtt^>04o08 tf y h^^^^tvr 3 2 If y hc^ 
M£l6 0 7 t^So 
[0 0 13] 06^IMtSo, S.lt V^fjlt 
8 tfy h^f>45 2o©AAi loc^m^^^tt^ttS 
#f©— it»t**-rt. ^r*t^ix£JLTOAr«-t-rtO 

[0 0 14] 

mo d 2 5 6) 
+ 1 mod25 6) 

[0017] @7 omw^m 7 o i *j j:^sH$#a 7 0 

2lt B 1 i;:*5y S 1 0 5 li:»/St s c r^)* 

^neftofWM^s 7 01, 702 m±<om^ 

tt^Mf^^At^^ t£r#mt Lrv^So IK 7 

r^, ^«lo©8^«2^Jab^^t^i^r^/^*v^^^ asm 

■eix-Pixo*»#SoradS|a 7 t^^ LfcffifritS: t So 

[0018] 701lt 7*— 703 

50 hS^SMdlttlftaSiSrt 5¥S7 0 4^b45rilt 




5 

-^£f¥^7 0 7 <t £#f$U /cii^ '0' "Cfc5 

7 0 6 7 10i4!3, 7 0 7 niE^ 

»7 0 9 ift5 o ^L^V^^{C^-^cDfe^7 
06IWO4*fe^7 0 9 t<i;»), t^7 0 7IW 
©***^7 10t45 B r5LtS*¥S:7 0 8|: 

Off##J£ 7 0 2 <K> i: * So 

l^£ 0 feirill ^ffilt^B ([§12^2 0 2^^16^6 
0 2) fcEtt£*i,fc«S\ 1:/*^ (6 4tTs/h) Bg 

^b-T HfrT S^i^ot K^tt £ ^ 5 

06-266284 (WK 5 ? 0 5-05 

0 2 7 6^-) rpf-^^ej ) s 0 

[0 0 2 0] 

[«W^«P»LJ:5i:i"5»«] SifED E S fc<b*tf>t£# 

ft) ;&s«i3g**vcv^ 0 ft*«/<ctO^IS5M»Rife (E 

1 i B i h a m "D ifferential Cr 
yptanalysis of DES- likeCr 
yptosys terns" , proceed ings 

o f crypto' 90) ^mitmmm td 
Espf-^o^^ft (i) j , i 9 9 3^m^tmm 

t^a !l r >f ^v?!? A S C I S 9 3 - 3 o fcifa* 

[0 0 2 1 ] DESti N [SI 2 ir^Lfcf — *^&^a<£> 
&*<!>mf)\?iy h^^tlhAtiCOe tf ^ h ii^6 tf 

flhftffij , 1 9 9 5¥«fti«*t* a yf-f^#^ 
^^SCI S95-A4. 3, 1 9 9 5. ) Q FEAL 
©i^Cft »MS6 0 3, 6 04, 6 0 5, 6 0 

(Dittos FEALiroV^Tt»j|ft?g*PR2fe^«-brS>* 

[0022] r(7>j: 5 j»^«pa«fe«-a-i"5*tfett*s 




(4) OT¥9~5454 7 

6 

Si 0 7 S:3c6t 6 ^iiaoT^f) HS^tt^il < f 
[0 0 2 3] £A±, RflUfcJ;5 4iftiao*r, mi 

& <fc 5 fc7*-**ift#a 107 sraws-t-s r k tmm 

[0 0 2 4] 

[■WB*r#*^3fc»<^a] A 

10 A*f-^^«SO[^-y f -^g(D^f--^^S'Ji- 

i^i^-f -^s^»f i 

art (-IBIS S t/cf- * gftfflfSSrfr 5 f* 

-^*«*a«:*ft< <b t> i o*u ttf-^aEtft^a 

m^-rspf^gtd^v^T, iwet*— ***^aas. m 
20 *:Ett*-5#E*#a£, «rEf-^»^aoA*Ki 

mwmm*m.irm 1 (omm^wc. t , mm 1 
»*aom*sr^*tJpttP!-<z?fi$^»i <£>t? s/ h^iji 

»2^>bfy hyiJ{^«-fS»2^«^a<!:. K3Sl<E> 
tf ^ b«liift(rE«E«*aiii|E«S*t*:«i4:f^ffl**r 
*ll«Sl#fctT5*l^*iWB««*ai, KJBIO* 

<b, fflfiB»2<z?e ^ h^j^K»i(Oi»^a»#a^ffiyj 
t , mmm 1 ©#itwg»iF#a(DUj* ^ k* 2 

30 St j|^a<£> k «riS#S t> i: oco tf y 'h 5»J i: f S » 
2 ^itt^ai:, ^ 1 ©jR-&#a©fflA^j»«faE»«: 

»»*ff5»3 0#j|ft»*||[#ai:, »*3©*jMyg« 
*#a©W^Ji:Wia»4^tr^ h59i:4riSilSLTT>i:o 

40 kzmmk-t&o 

[0025] iktc*%>m<Dm^rmmte. mm^f-^m^ 
*a*. *3o?itt^a©u*i:WE«WBi«*afcfB« 

[0 0 2 6] *fc*#W<Dtf*S»tt, f-^^^a 

^*rrs*iogsc»#a^tt< ^ 1 1 o*=. 
a^a^ ^ «ria»»aE**ao a* t * a^j t *r 

50 ^&k&mx.Z>~k*¥?mk1rZ> 0 




7 

[0 0 2 7] 

8107 iflidct 5 r t liisftraat-fcs, 

[0 0 2 8] H8lt *3£&Ji<z>^ l ©HJKW^jsttST* 

#^/&t;iov^tW!U i»8 0 2, 8 1 2, » 
IMS8 0 7, 8 1 0, 8 1 7, Mift8 0 9, 8 

[0 0 2 9] W&—9W&&®.<OK1) 8 0 1 
fS8 0 2^££&&«:g#fc^ »fH¥a8 0 3^*5 
V^T^l COtf-/ h^U 8 0 4 <tfg2<7>fcf y h^lj 8 0 5 k\C 

6 i: 1 1> k» i <DfEmmm&¥& so 7 <DAf) k**& 0 

m 1 <DmMM& 8 0 9 «:K#i»?gSi» 8 0 7 (DtBJj 8 0 
8 $r A£l <OfmWSk% 8 10 1 GOiSlTfc 

fij&8 0 9<Dmtitm^2<D\f^ b^U 8 0 4 k & A£l k 

-r^o «fE»i<z>*j»?ga*8 0 7<7>a^8 0 8tfl(riE 
» 2 (D#m&u% s i o rom^j t tttt^a snti 
3*£tK mm&^-& s i i©a*j4i»flgae»^a8 1 2 

I*»«fa8 1 3lJL*5V^T»3<Z>try h?lj8 1 4 t»4 

otrs/ h?ij2 1 5 ifii^WSJxSo mz<offiBW&Bi 

6«K»4^tfs/ h^J8 1 5SrA*<!: fg3<7>#^ 
S*8 1 7ttBEl2©»JglH8 1 6CDtU^<tmfl2^3 

©Ifs' h«l8 1 4 tSrA^t + So mms<D^mm^» 

8 1 7^>U*i:ffiflE»4(^tf ^ h^U 8 1 5 i fctlfrg^a 
8 18t*^$^ 8 18©lliWRf^Sftfai 

0 7<DMt)8 1 9 kft&o 

[0 0 3 0] m&$ms 0 2te. A*f^*XiLfe 
fci&fcfr o t u (X) iXSti©lfyhS 

§5 0 rr-cr o tutli, RirRMLfciSi^ 12 

[0 0 3 1 ] Bl0ttB8 (DWmW&k 8 1 2 fllfSffil 
»Sfd*rJ8^T^S 0 ^[§16^85 0 2 tCTA^ 5 0 

5 0 1 £)fcf y h»OS^«lWIft3afti5 0 3 ^rm^i: LTl^ 

[0 0 3 2] m&&»8 1 2tt, A^r-^^Xi Lfc 
tSI^ fctxJSr o t„t r o t B (X) <tXg#t 




(5) ffl¥9-5 4 5 4 7 

8 

[0 0 3 3] mi 1 tem8<DBM&&8 0 2©-««« 

TiSliIB»#aSr, LTtTs/ 
afn*rfflV^V^S 0 r rT% mm&&^WL4 0 2, 4 0 
3 ^T-tJvPiXr o tn, r o t»0>SW«:fTV\ -tl 

& <^S5®^m £ A* 4 o i <o tr y h SotJMfcttl&aafn 4 
10 x o if3o(7>A*tr 5/ b^WSrSttSfcifc, 

[0 0 3 4] #iR7g8i3£ 807, 810, 8 1 71^ ^ 
X xor Y xor rot,(X and Y) 
x o r ttetf y hS<Z>SNfe«»3fil«:^U and^i 

try hs^aaaas:*i-o 

20 [0 0 3 5] Jll^Btft 8 0 9 fc £ KjiA^jS: 7 fcT y 
h a — t 1 — > 3 >-t Z>m& k IsXMtSrf 6 £ £ *st?# 

[0036] mmmm^^^x, T—zwg&wtvmi) 

8 1 9<£>3 2#B tx — ^**^S^A^8 0 1 i«|E 

it^as o 6{^tm£ftx\,^mk<Dm%&^mL<t' 

(D&nk^xdbZo cut^m^^t, Y^fi^-^m 

z£@L<Dttit)8 1 9C03 2#g(^tTy K Xit^— 

»#a^A*8 o i <d i#a<z>tr ^ k Kif*«iB«^ 

Y32~ K2 ~\~ K.4 + K13+ KieH~ XioH~ Xi9"f" Xzo"t" X 
21 4~ X28"J~ XasH" X32 H~ K15 ^ (X9 + X20"f"X9l) ~i~ 

K 3 * (X 8 +X 19 +X29) +Ki * (X 6 +X 17 +X 
27) +Ki 2 * (X 6 +X 17 +X 28 ) + (Ki+Xe+X 
17 ~l" X27 - ! - K16 ^ ( XioH - X21 ~l~ X32) ) ^ (Xs ~h X 

18~f"X29) + (Kl ~f~ K.12~l~ Xe H" X is 4" X27~l" X28~l~ 

X29 - 1 - Xi6 3 fc ( X io H~ X21 -f~ X32) "f - ( Xie H - X io H - X 

21+ X32 + Xl5* (X9+X20+X3.) ) * (X7+X 

40 i 7 +X 26 ) +Kn* (X s +Xi, + X 3 2) ) * (K 8 + 

KiS+Xs H~Xo ~hXi9~hX20~f~X29 - f~ X31+ Kh^ 
(Xg+Xig-hXao) ~f~K2 5 f c (X 7 ~t"Xi8~l _ X28) ) 

ttl*8 1 90 if * h^*<^#i»«*«irfcJ:*»»4r 
0 2, 8 18^ N r*be>(7>«Jg*tft*a<7>A*i:il©A 

50 -f-v/ 3 y) ^nmK^s (^<ommm^ 




(6) 

9 

v^Tfitf y y%mmm&witi) zmirmf&x&z>ti 201 

fe> »ai8 0 7, 8 1 0, 8 1 7ia5*ii<e 2 02 

ia[*(7?Sal*^*J:<*£tScUTV^5il^:^J:So 2 0 3 

[0 0 3 7] m9\tt$£W<Dm2<DmMm\Z$otfZ>7?-- 2 04 

0 7<7)«riJ«r*bfeEI"t?&5o *SU6«{- 2 05 

*3l^Tte. ir^»^10 7©tJj^«l^l:S5 2 06 

^Nif*ia8^ufc«i:^<Hc-efc5o 0 8<t<£>ism 207 

1 8©tH*i«iBtt#®9 0 ei^mm^thx^^mt^ 402 

A^£ LT^iR-cotf >y h&Wy h^tU^U 10 4 0 3 
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